6.5

CVE-2009-0588

EPSS 0.46%
Veröffentlicht 27.05.2009 16:30:01
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

agent/request/op.cgi in the Registration Authority (RA) component in Red Hat Certificate System (RHCS) 7.3 and Dogtag Certificate System allows remote authenticated users to approve certificate requests queued for arbitrary agent groups via a modified request ID field.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Redhat ≫ Certificate System Version7.3

Redhat ≫ Dogtag Certificate System

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.46%	0.612

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.5	8	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P

http://secunia.com/advisories/35242

http://secunia.com/advisories/35263

http://www.redhat.com/support/errata/RHSA-2009-1065.html

Patch

Vendor Advisory

http://www.securityfocus.com/bid/35104

http://www.securitytracker.com/id?1022278

https://bugzilla.redhat.com/show_bug.cgi?id=484828

Patch

https://bugzilla.redhat.com/show_bug.cgi?id=488706

https://nvd.nist.gov/vuln/detail/CVE-2009-0588

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-0588

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-0588

EUVD